Exposed Build Artifacts and Debug Files

Detects build artifacts, debug information, and development files committed to version control or accessible in production.

zakirkun Updated

File contents

Exposed Build Artifacts and Debug Files

Overview

Build artifacts, debug symbols, and development configuration files accidentally committed or deployed expose internal application structure and potentially sensitive logic. Common exposures:

  • .map source map files in production (exposes original source)
  • *.pdb debug symbol files
  • node_modules/ committed to git
  • .DS_Store files leaking directory structure
  • TODO, FIXME comments with security implications

Remediation

  • Add build artifacts to .gitignore
  • Disable source map generation in production builds
  • Serve content with proper X-Content-Type-Options: nosniff headers

zakirkun/ice-tea/tree/main/skills/devops/exposed-build-artifacts commit 503295ab7b

Frequently asked questions

npx skillmds@latest add zakirkun/exposed-build-artifacts-and-debug-files